Last updated: November 2026
Contents: 1. Who is responsible · 2. What we collect · 3. Why we use it · 4. Who receives it · 5. Transfers outside the EEA · 6. How long we keep it · 7. Your rights · 8. Minors · 9. Changes
1. Who is responsible for your data
The data controller is GLOBAL INTEGRATED MARKETING COMMUNICATION GROUP HOLDINGS LIMITED, RM 01,15/F, GOLDSLAND BUILDING 22-26 MINDEN AVENUE TSIM SHA TSUI, KL, Tsim Sha Tsui, Kowloon, Hong Kong (“MyDailyBuyShop”, “we”). You can contact us at [email protected].
2. What we collect
- When you order: first name, last name, phone number, delivery address, the product and quantity, and any note you write in the form.
- When you contact us: your email address or phone number and the content of your message or call.
- When you visit the site: technical data such as IP address, browser and device type, pages requested and time of the request, recorded in server logs.
- With your consent only: data collected by Google Ads cookies, described in our Cookie Policy.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Confirming your order by phone, delivering it and collecting payment on delivery | Contract (Art. 6(1)(b)) |
| Handling withdrawals, returns, refunds and guarantee requests | Contract and legal obligation (Art. 6(1)(b) and (c)) |
| Keeping accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Keeping the site secure and preventing fraudulent orders | Legitimate interest (Art. 6(1)(f)) |
| Measuring the results of our Google Ads advertising | Your consent (Art. 6(1)(a)) |
You need to give us the order data to buy from us; without it we cannot deliver. Giving consent to advertising cookies is optional.
4. Who receives your data
Only the providers we need, and only the data they need:
- Hostinger – hosting of the website;
- Cloudflare – network delivery and protection of the website;
- courier companies – delivery and collection of the cash payment;
- call-centre service providers (if used) – order confirmation calls;
- warehouse and logistics providers (if used) – preparation and shipping of the parcel;
- Cloudflare – our email service;
- Google Ireland Limited (Google Ads, Google Tag Manager) – only if you accept marketing cookies;
- accountants, lawyers and authorities when the law requires it.
We do not sell personal data.
5. Transfers outside the European Economic Area
Some providers, such as Google and Cloudflare, may process data outside the EEA, including in the United States. In that case the transfer is covered by an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework for certified companies) or by the Standard Contractual Clauses. As we are based in Hong Kong, order data is also accessed from outside the EEA. You can ask for information on the safeguards applied to this transfer by writing to us.
6. How long we keep it
- Order data: for as long as needed to complete the order and handle returns and guarantee claims, then for the period required by tax and accounting law.
- Messages to customer service: until your request is closed and then for as long as a legal claim could arise.
- Server logs: for a short period for security reasons.
- Advertising cookies: until they expire or you withdraw consent (see the Cookie Policy).
7. Your rights
You can ask us for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interest. You can withdraw consent at any time from the cookie settings link in the footer, without affecting earlier processing. Write to [email protected]. You also have the right to complain to the data protection authority of the country where you live or work.
8. Minors
The shop is for adults. We do not knowingly collect data from people under 18.
9. Changes
If we change this policy, we publish the new version here with a new date.